Files
Cloud-20Engineering/Policies/Web Applications should only accept TLS 1.2 or higher (v4).json
Jurjen Ladenius f5f8333dce - web app settings (ftps/php)
-Policies
2022-08-11 11:14:28 +02:00

115 lines
2.8 KiB
JSON

{
"mode": "All",
"policyRule": {
"if": {
"anyOf": [
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites"
},
{
"field": "Microsoft.Web/sites/httpsOnly",
"notEquals": "true"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/slots"
},
{
"field": "Microsoft.Web/sites/slots/httpsOnly",
"notEquals": "true"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/config"
},
{
"field": "name",
"notLike": "connectionstrings"
},
{
"field": "name",
"notLike": "backup"
},
{
"field": "name",
"notLike": "authsettingsV2"
},
{
"field": "name",
"notLike": "authsettings"
},
{
"field": "name",
"notLike": "appsettings"
},
{
"field": "Microsoft.Web/sites/config/minTlsVersion",
"notEquals": "1.2"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Web/sites/slots/config"
},
{
"field": "name",
"notLike": "connectionstrings"
},
{
"field": "name",
"notLike": "backup"
},
{
"field": "name",
"notLike": "authsettingsV2"
},
{
"field": "name",
"notLike": "authsettings"
},
{
"field": "name",
"notLike": "appsettings"
},
{
"field": "Microsoft.Web/sites/slots/config/minTlsVersion",
"notEquals": "1.2"
}
]
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Audit",
"deny",
"Disabled"
],
"defaultValue": "Audit"
}
}
}